Skip to content

Fix escaping #10

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
sadaszewski wants to merge 5 commits into
base: master
Choose a base branch
from
Open

Fix escaping #10

Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
fbe3bdd
Fix escaping
sadaszewski Aug 24, 2025
6628025
Update __init__.py
sadaszewski Aug 24, 2025
dfd8eb7
Update __init__.py
sadaszewski Aug 24, 2025
7a322f2
Add dont_escape.
sadaszewski Oct 6, 2025
935b5b0
Fix attribute cast to str.
sadaszewski Oct 7, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 11 additions & 4 deletions htbuilder/__init__.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -53,6 +53,8 @@
from .units import unit
from .utils import classes, fonts, rule, styles

from html import escape

EMPTY_ELEMENTS = set(
[
# https://developer.mozilla.org/en-US/docs/Glossary/Empty_element
Expand Down Expand Up @@ -143,13 +145,13 @@ def __getitem__(self, *children: Any):
return self(children)

def __str__(self) -> str:
children = "".join([str(c) for c in self._children])
children = "".join([escape(c) if isinstance(c, str) else str(c) for c in self._children])

if self._tag is None:
return children

tag = _clean_name(self._tag)
attrs = " ".join([f'{_clean_name(k)}="{v}"' for k, v in self._attrs.items()])
attrs = " ".join([f'{_clean_name(k)}="{escape(str(v))}"' for k, v in self._attrs.items()])

if self._cannot_have_children:
if self._attrs:
Expand Down Expand Up @@ -209,7 +211,12 @@ def _to_flat_list(obj: Any) -> Any:
return out


class dont_escape:
def __init__(self, s: str):
self.s = s
def __str__(self):
return self.s


def __getattr__(tag: str) -> HtmlTag:
if tag == "fragment":
return HtmlTag(tag)
return HtmlTag(None)